{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:ZDR4MZFJAYU4W4Y3R2UVXYWTOS","short_pith_number":"pith:ZDR4MZFJ","canonical_record":{"source":{"id":"2311.09763","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-16T10:38:43Z","cross_cats_sorted":[],"title_canon_sha256":"7803ce9bb7837d5e40ffd04cfcc01eb25d7a8fe0d7eae25b6145d0e18c3fb6fd","abstract_canon_sha256":"a6e070606dfe8f69d3331b0fec10a1c0b50d051dae3f7dde45fe40bcd8369a01"},"schema_version":"1.0"},"canonical_sha256":"c8e3c664a90629cb731b8ea95be2d374b34898d66a881eb7c620e0478a7f154a","source":{"kind":"arxiv","id":"2311.09763","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.09763","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"arxiv_version","alias_value":"2311.09763v2","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.09763","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"pith_short_12","alias_value":"ZDR4MZFJAYU4","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"pith_short_16","alias_value":"ZDR4MZFJAYU4W4Y3","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"pith_short_8","alias_value":"ZDR4MZFJ","created_at":"2026-07-05T10:12:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:ZDR4MZFJAYU4W4Y3R2UVXYWTOS","target":"record","payload":{"canonical_record":{"source":{"id":"2311.09763","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-16T10:38:43Z","cross_cats_sorted":[],"title_canon_sha256":"7803ce9bb7837d5e40ffd04cfcc01eb25d7a8fe0d7eae25b6145d0e18c3fb6fd","abstract_canon_sha256":"a6e070606dfe8f69d3331b0fec10a1c0b50d051dae3f7dde45fe40bcd8369a01"},"schema_version":"1.0"},"canonical_sha256":"c8e3c664a90629cb731b8ea95be2d374b34898d66a881eb7c620e0478a7f154a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:12:57.343918Z","signature_b64":"6fOsKLbUVKPqpYJOd52ohJzlijWa4H4oI0vehJ9c3u1IEa1Z6wwozE5QKJIXC8A6SghX0DXPmtmehXI96BT8Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c8e3c664a90629cb731b8ea95be2d374b34898d66a881eb7c620e0478a7f154a","last_reissued_at":"2026-07-05T10:12:57.343344Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:12:57.343344Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.09763","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:12:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RrnFItpybeDTlWuLG9/rjVwVN4WkxsyyYhmFycXQRiy+6x9qmdT1ukcpVkHm5xKUOZ8rJ0dDFadtZiWj/nFnBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T14:50:38.028176Z"},"content_sha256":"0f03cc8baca587af904e6b96895d62eb79e2e7fceceaa561a8cb5ed18f8a12a6","schema_version":"1.0","event_id":"sha256:0f03cc8baca587af904e6b96895d62eb79e2e7fceceaa561a8cb5ed18f8a12a6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:ZDR4MZFJAYU4W4Y3R2UVXYWTOS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Chaowei Xiao, Hadi Askari, Jiashu Xu, Jiongxiao Wang, Jun Yan, Muhao Chen, Qin Liu, Wenjie Mo","submitted_at":"2023-11-16T10:38:43Z","abstract_excerpt":"Existing studies in backdoor defense have predominantly focused on the training phase, overlooking the critical aspect of testing time defense. This gap becomes pronounced in the context of LLMs deployed as Web Services, which typically offer only black-box access, rendering training-time defenses impractical. To bridge this gap, this study critically examines the use of demonstrations as a defense mechanism against backdoor attacks in black-box LLMs. We retrieve task-relevant demonstrations from a clean data pool and integrate them with user queries during testing. This approach does not nece"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.09763","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.09763/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:12:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Qb5FIWlCoSxYp/pn+mF1BOrNuc7JHi6Y3XXh+3w0QM+FrQEWHbFpEihOQAXjx26RRdmTAwCDVA8n7VoZnpfWAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T14:50:38.028564Z"},"content_sha256":"80258864332610a8d557796bae252d23157aed3273576204d295a5f305fb6f18","schema_version":"1.0","event_id":"sha256:80258864332610a8d557796bae252d23157aed3273576204d295a5f305fb6f18"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZDR4MZFJAYU4W4Y3R2UVXYWTOS/bundle.json","state_url":"https://pith.science/pith/ZDR4MZFJAYU4W4Y3R2UVXYWTOS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZDR4MZFJAYU4W4Y3R2UVXYWTOS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T14:50:38Z","links":{"resolver":"https://pith.science/pith/ZDR4MZFJAYU4W4Y3R2UVXYWTOS","bundle":"https://pith.science/pith/ZDR4MZFJAYU4W4Y3R2UVXYWTOS/bundle.json","state":"https://pith.science/pith/ZDR4MZFJAYU4W4Y3R2UVXYWTOS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZDR4MZFJAYU4W4Y3R2UVXYWTOS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:ZDR4MZFJAYU4W4Y3R2UVXYWTOS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a6e070606dfe8f69d3331b0fec10a1c0b50d051dae3f7dde45fe40bcd8369a01","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-16T10:38:43Z","title_canon_sha256":"7803ce9bb7837d5e40ffd04cfcc01eb25d7a8fe0d7eae25b6145d0e18c3fb6fd"},"schema_version":"1.0","source":{"id":"2311.09763","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.09763","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"arxiv_version","alias_value":"2311.09763v2","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.09763","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"pith_short_12","alias_value":"ZDR4MZFJAYU4","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"pith_short_16","alias_value":"ZDR4MZFJAYU4W4Y3","created_at":"2026-07-05T10:12:57Z"},{"alias_kind":"pith_short_8","alias_value":"ZDR4MZFJ","created_at":"2026-07-05T10:12:57Z"}],"graph_snapshots":[{"event_id":"sha256:80258864332610a8d557796bae252d23157aed3273576204d295a5f305fb6f18","target":"graph","created_at":"2026-07-05T10:12:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.09763/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Existing studies in backdoor defense have predominantly focused on the training phase, overlooking the critical aspect of testing time defense. This gap becomes pronounced in the context of LLMs deployed as Web Services, which typically offer only black-box access, rendering training-time defenses impractical. To bridge this gap, this study critically examines the use of demonstrations as a defense mechanism against backdoor attacks in black-box LLMs. We retrieve task-relevant demonstrations from a clean data pool and integrate them with user queries during testing. This approach does not nece","authors_text":"Chaowei Xiao, Hadi Askari, Jiashu Xu, Jiongxiao Wang, Jun Yan, Muhao Chen, Qin Liu, Wenjie Mo","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-16T10:38:43Z","title":"Test-time Backdoor Mitigation for Black-Box Large Language Models with Defensive Demonstrations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.09763","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0f03cc8baca587af904e6b96895d62eb79e2e7fceceaa561a8cb5ed18f8a12a6","target":"record","created_at":"2026-07-05T10:12:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a6e070606dfe8f69d3331b0fec10a1c0b50d051dae3f7dde45fe40bcd8369a01","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-11-16T10:38:43Z","title_canon_sha256":"7803ce9bb7837d5e40ffd04cfcc01eb25d7a8fe0d7eae25b6145d0e18c3fb6fd"},"schema_version":"1.0","source":{"id":"2311.09763","kind":"arxiv","version":2}},"canonical_sha256":"c8e3c664a90629cb731b8ea95be2d374b34898d66a881eb7c620e0478a7f154a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c8e3c664a90629cb731b8ea95be2d374b34898d66a881eb7c620e0478a7f154a","first_computed_at":"2026-07-05T10:12:57.343344Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:12:57.343344Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6fOsKLbUVKPqpYJOd52ohJzlijWa4H4oI0vehJ9c3u1IEa1Z6wwozE5QKJIXC8A6SghX0DXPmtmehXI96BT8Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T10:12:57.343918Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.09763","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0f03cc8baca587af904e6b96895d62eb79e2e7fceceaa561a8cb5ed18f8a12a6","sha256:80258864332610a8d557796bae252d23157aed3273576204d295a5f305fb6f18"],"state_sha256":"a0bc6d2c89c3822334e76a685e06a00b603c20ef2664b28adba33146a9b12205"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dMaIa4E9lY1EcJa0fZrOrwnXlm0ZePfOZ9F081iq0RCctCoFgh5BGZFUGo/aRdXArJ+vZLLrRitefSRw2k8GBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T14:50:38.030542Z","bundle_sha256":"c67672849b8a7008cf92aabff3a8f414e41fe48ebdcde84a1ce14693bdacf033"}}